General

  • Target

    2024-02-14_6e011872b4355caf513f9ec0fa2e8a5a_cryptolocker

  • Size

    87KB

  • MD5

    6e011872b4355caf513f9ec0fa2e8a5a

  • SHA1

    1ea4a490a395aca54bdd628be928adc73549a560

  • SHA256

    44f9790615b3d504af3798cbe71fc40c3b7b6d814548c449bea51fc26e89f9e8

  • SHA512

    d8c7549926a92270ad147bc4d016278b193d2bb83c6f9084185c9509a3e1f7988afc69715d49b1ad712a8ac277a64538fbca0533dbd267e43ca4381f743016d5

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgLY:AnBdOOtEvwDpj6zQ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-14_6e011872b4355caf513f9ec0fa2e8a5a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections